70a847655782a9788a5d4bdd12fcb43c | Triage

Sharing

General

Target

70a847655782a9788a5d4bdd12fcb43c
Size

480KB
MD5

70a847655782a9788a5d4bdd12fcb43c
SHA1

9c8d5ba0c86542a9112e94273bacf68455f1734d
SHA256

b5091f4339cd8f86eae2695c23e2eabe6353369d9d18a02b8553ff220a573c2c
SHA512

a2e60b3d439e07dd3aab90ebbfb330e761a65847e7c53db7f43b3c54382424e5f6879690b60a8d9e065f235d83977a4cd09dc35aa2dc3ae20eb0732cee52d044
SSDEEP

6144:xMf5FvZhGZoveaCdBlZuRoPDSDdT+ZzvQ9w740u3oZZiaerSy:xs5FxQ6vbCpx2dT+RQKEp3KArSy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70a847655782a9788a5d4bdd12fcb43c

Files

70a847655782a9788a5d4bdd12fcb43c
.exe windows:4 windows x86 arch:x86

3ea7b13ecac7a211b8626d5cd6fc497f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlInitializeBitMap

ole32

UtGetDvtd16Info

user32

GetInputDesktop
GetClipboardOwner

Sections

.text
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE